Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/8c92adaa-f1ec-3d95-908e-a2742bf97179.roa
File:                     8c92adaa-f1ec-3d95-908e-a2742bf97179.roa (raw, json)
Hash identifier:          g+HFft68nKAYKLwWY67r1m194IgNwpjZ9zuTeTbWjog=
Subject key identifier:   C0:84:B2:63:27:93:22:18:3F:7D:3B:49:78:09:72:E3:83:74:2F:9A
Certificate issuer:       /CN=f42ba754-2a4d-4b4e-b364-698af500fc82
Certificate serial:       010D0C9F4328584F49882C8A88D7A8FF6D258000
Authority key identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/8c92adaa-f1ec-3d95-908e-a2742bf97179.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     1613
IP address blocks:        168.100.224.0/23 maxlen: 23
                          168.100.244.0/24 maxlen: 24
                          2605:e740:400::/40 maxlen: 40
                          2605:e740:ff04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:2c:8a:88:d7:a8:ff:6d:25:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42ba754-2a4d-4b4e-b364-698af500fc82
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b6ea8539-2e33-463a-813a-f68f815df5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c4:ad:26:f3:06:79:31:61:a6:93:e8:d4:a8:
                    68:a6:ba:37:8c:e0:48:41:0c:80:5c:d6:06:d1:1c:
                    b9:52:8b:3f:5a:06:1b:02:de:de:c3:11:7b:8f:74:
                    25:58:10:6b:08:9d:85:00:12:32:d5:b1:a9:2b:ca:
                    29:4c:ed:b1:7b:89:38:2e:56:0f:ff:16:10:7c:4f:
                    93:53:26:b1:65:cc:25:a5:56:56:ee:a5:21:a6:97:
                    ac:00:af:21:07:43:ac:be:a6:cb:13:4a:ca:a4:16:
                    47:bc:3b:8a:47:16:8d:6d:48:83:4b:9d:ce:a8:3c:
                    7c:9f:cf:b7:2a:23:60:34:e2:4e:06:06:32:74:9c:
                    9f:1c:47:83:df:96:a1:13:10:7c:31:eb:47:bd:06:
                    74:3b:7c:82:d7:29:65:4a:db:ba:b8:00:75:99:94:
                    d3:b8:43:e3:10:c3:ee:37:89:20:c4:4a:aa:91:87:
                    7b:c7:73:ea:f7:40:b1:11:ce:cb:45:20:90:c8:ed:
                    e4:ce:f3:1b:af:19:a3:f1:b0:00:81:70:69:c9:43:
                    2b:1a:c0:ab:49:57:5f:1c:7d:84:8d:e0:cb:ca:18:
                    98:3a:71:60:e6:6b:50:94:9d:64:96:64:c8:44:8c:
                    52:b6:11:57:36:0a:c2:50:05:1d:97:1e:77:24:54:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:B2:63:27:93:22:18:3F:7D:3B:49:78:09:72:E3:83:74:2F:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/8c92adaa-f1ec-3d95-908e-a2742bf97179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl

            X509v3 Authority Key Identifier:
                keyid:7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.224.0/23
                  168.100.244.0/24
                IPv6:
                  2605:e740:400::/40
                  2605:e740:ff04::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:10:39:d2:f2:ba:29:e6:01:cb:63:55:29:f4:d8:b7:90:66:
         ab:e5:40:3d:ef:61:39:23:93:41:fa:61:38:bf:ca:08:06:8d:
         1d:63:1e:8b:b2:a2:49:03:f3:f7:9e:c1:a9:71:b7:9e:2b:0e:
         71:b3:38:b8:fb:db:d0:32:72:74:d9:37:11:b8:df:c1:7e:29:
         96:c8:19:3e:98:cd:51:0a:57:a0:f9:b6:82:bb:b7:5a:26:f3:
         d4:e8:7f:19:19:53:4b:19:4d:26:2e:a4:7b:dc:f7:61:37:c4:
         c9:a6:a4:62:aa:75:7e:29:67:77:c0:23:29:e6:eb:00:8f:59:
         10:cf:10:88:59:42:55:aa:39:68:cc:c7:13:6d:f3:71:20:a3:
         30:b5:c7:3d:6c:9d:a5:66:cc:99:6d:85:ad:26:97:b8:ee:fb:
         1d:a5:36:41:f6:d6:c3:e8:a7:f3:f9:8e:4f:ad:12:b3:fa:67:
         1f:0f:de:d1:02:8e:17:1b:a9:5e:78:df:97:29:09:b3:1a:8b:
         43:7c:f9:24:c5:85:15:2e:8c:1b:0c:27:4a:9a:c9:cc:98:20:
         a6:39:ff:d4:78:0d:c5:7b:43:36:d3:eb:38:47:f0:2e:5d:57:
         50:ba:40:f2:4a:f5:4b:87:db:12:66:48:3d:a0:60:0b:a6:95:
         4f:6d:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:25:15 2026 by rpki-client